NVD

Id
83239  
Name
CVE-2017-5675  
Description
A command-injection vulnerability exists in a web application on a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models. The mail-sending form in the mail.htm page allows an attacker to inject a command into the receiver1 field in the form; it will be executed with root privileges.  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-03-18  
Published
2017-03-13  
Modified Date
2017-03-15  
Seq
2017-5675  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
408058 83239 CVE-2016-7426 https://bto.bluecoat.com/security-advisory/sa139  View
409091 83239 CVE-2016-4493 [oss-security] 20160505 Re: CVE Request: No Demangling During Analysis of Untrusted Binaries  View
409092 83239 CVE-2016-4493 https://gcc.gnu.org/bugzilla/show_bug.cgi?id=70926  View
409093 83239 CVE-2016-4493 [gcc-patches] 20160503 Fix for PR70926 in Libiberty Demangler (5)  View
409094 83239 CVE-2016-4493 [oss-security] 20160505 Re: CVE Request: No Demangling During Analysis of Untrusted Binaries  View
409095 83239 CVE-2016-4493 https://gcc.gnu.org/bugzilla/show_bug.cgi?id=70926  View
409096 83239 CVE-2016-4493 [gcc-patches] 20160503 Fix for PR70926 in Libiberty Demangler (5)  View
411314 83239 CVE-2017-2290 96583  View
411315 83239 CVE-2017-2290 https://puppet.com/security/cve/cve-2017-2290  View
411316 83239 CVE-2017-2290 96583  View
411317 83239 CVE-2017-2290 https://puppet.com/security/cve/cve-2017-2290  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
65895 JVNDB-2017-002234 Foscam などのホワイトラベルの IP カメラモデルで使用されるカスタムビルドの GoAhead Web サーバにおけるコマンドインジェクションの脆弱性 Foscam、Vstarcam、および複数のホワイトラベルの IP カメラモデルで使用されるカスタムビルドの GoAhead Web サーバ上の Web アプリケーションには、コマンドインジェクションの脆弱性が存在します。 CVE-2017-5675 CVE-2017-5675 83239 9 8.8 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002234.html 2017-01-31 2017-04-05 View